İçeriğe atla
Noroxi

punbb kayıtları

punbb üreticisine ait 47 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
0 · %0
Pre-auth RCE
13
Düzeltme kaydı olan
%0
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

    Çubuk: toplam · koyu kısım: CISA KEV.

    Tekrar eden sınıflar

    Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

    CWE

    Saldırı profili

    Tüm kayıtlar

    47 kayıt
    • CVE-2008-3335
      41Planlayın

      Unspecified vulnerability in PunBB before 1.2.19 allows remote attackers to inject arbitrary SMTP commands via unknown vectors.

      KritikCVSS 10,0İstismar yokEPSS %3

      punbb · punbb27 Tem 2008

    • CVE-2006-5735
      34İzleyin

      Directory traversal vulnerability in include/common.php in PunBB before 1.2.14 allows remote authenticated users to include and execute arbi

      YüksekCVSS 7,5İstismar yokEPSS %14

      punbb · punbb6 Kas 2006

    • CVE-2006-1090
      32İzleyin

      register.php in PunBB 1.2.10 allows remote attackers to cause an unspecified denial of service via a flood of new user registrations.

      YüksekCVSS 7,8Kavram kanıtıEPSS %4

      punbb · punbb9 Mar 2006

    • CVE-2005-3518
      31İzleyin

      SQL injection vulnerability in search.php in PunBB 1.2.7 and 1.2.8 allows remote attackers to execute arbitrary SQL commands via the old_sea

      YüksekCVSS 7,5Kavram kanıtıEPSS %3

      punbb · punbb6 Kas 2005

    • CVE-2005-0569
      31İzleyin

      Multiple SQL injection vulnerabilities in PunBB 1.2.1 allow remote attackers to execute arbitrary SQL commands via the (1) language paramete

      YüksekCVSS 7,5Kavram kanıtıEPSS %3

      punbb · punbb2 May 2005

    • CVE-2005-3328
      31İzleyin

      PHP remote file inclusion vulnerability in common.php in PunBB 1.1.2 through 1.1.5 allows remote attackers to execute arbitrary code via the

      YüksekCVSS 7,5İstismar yokEPSS %3

      punbb · punbb27 Eki 2005

    • CVE-2005-2193
      30İzleyin

      SQL injection vulnerability in the user profile edit module in profile.php for PunBB 1.2.5 and earlier allows remote attackers to execute ar

      YüksekCVSS 7,5İstismar yokEPSS %1

      punbb · punbb11 Tem 2005

    • CVE-2009-2308
      30İzleyin

      Multiple SQL injection vulnerabilities in affiliates.php in the Affiliation (aka Affiliates) module 1.1.0 and earlier for PunBB allow remote

      YüksekCVSS 7,5Kavram kanıtıEPSS %1

      punbb · punbb2 Tem 2009

    • CVE-2007-2234
      30İzleyin

      include/common.php in PunBB 1.2.14 and earlier does not properly handle a disabled ini_get function when checking the register_globals setti

      YüksekCVSS 7,5İstismar yokEPSS %1

      punbb · punbb25 Nis 2007

    • CVE-2009-2786
      30İzleyin

      SQL injection vulnerability in reputation.php in the Reputation plugin 2.2.4, 2.2.3, 2.0.4, and earlier for PunBB allows remote attackers to

      YüksekCVSS 7,5Kavram kanıtıEPSS %1

      punbb · punbb17 Ağu 2009

    • CVE-2009-2276
      30İzleyin

      SQL injection vulnerability in voteforus.php in the Vote For Us extension 1.0.1 and earlier for PunBB allows remote attackers to execute arb

      YüksekCVSS 7,5Kavram kanıtıEPSS %1

      punbb · punbb1 Tem 2009

    • CVE-2009-2787
      28İzleyin

      Directory traversal vulnerability in include/reputation/rep_profile.php in the Reputation plugin 2.2.4, 2.2.3, 2.0.4, and earlier for PunBB,

      OrtaCVSS 6,8Kavram kanıtıEPSS %4

      punbb · punbb17 Ağu 2009

    • CVE-2006-5738
      28İzleyin

      Multiple SQL injection vulnerabilities in PunBB before 1.2.14 allow remote authenticated administrators to execute arbitrary SQL commands vi

      YüksekCVSS 7,2İstismar yokEPSS %1

      punbb · punbb6 Kas 2006

    • CVE-2006-5737
      28İzleyin

      PunBB uses a predictable cookie_seed value that can be derived from the time of registration of the superadmin account (installation time),

      YüksekCVSS 7,2İstismar yokEPSS %0

      punbb · punbb6 Kas 2006

    • CVE-2005-1051
      27İzleyin

      SQL injection vulnerability in profile.php in PunBB 1.2.4 allows remote authenticated users to execute arbitrary SQL commands via the id par

      OrtaCVSS 6,5Kavram kanıtıEPSS %2

      punbb · punbb2 May 2005

    • CVE-2007-2236
      27İzleyin

      footer.php in PunBB 1.2.14 and earlier allows remote attackers to include local files in include/user/ via a cross-site scripting (XSS) atta

      OrtaCVSS 6,8İstismar yokEPSS %1

      punbb · punbb25 Nis 2007

    • CVE-2006-2724
      27İzleyin

      Cross-site scripting (XSS) vulnerability in PunBB 1.2.11 allows remote authenticated administrators to inject arbitrary HTML or web script t

      OrtaCVSS 6,8İstismar yokEPSS %1

      punbb · punbb31 May 2006

    • CVE-2008-7241
      27İzleyin

      Cross-site request forgery (CSRF) vulnerability in PunBB before 1.2.17 allows remote attackers to hijack the authentication of unspecified u

      OrtaCVSS 6,8İstismar yokEPSS %1

      punbb · punbb17 Eyl 2009

    • CVE-2008-5434
      26İzleyin

      Multiple SQL injection vulnerabilities in PunBB 1.3 and 1.3.1 allow remote authenticated administrators to execute arbitrary SQL commands vi

      OrtaCVSS 6,5İstismar yokEPSS %1

      punbb · punbb11 Ara 2008

    • CVE-2006-0865
      21İzleyin

      PunBB 1.2.10 and earlier allows remote attackers to cause a denial of service (resource consumption) by registering many user accounts quick

      OrtaCVSS 5,0Kavram kanıtıEPSS %3

      punbb · punbb23 Şub 2006

    • CVE-2008-6308
      21İzleyin

      Multiple directory traversal vulnerabilities in Private Messaging System (PMS) 1.2.3 and earlier for PunBB allow remote attackers to include

      OrtaCVSS 5,1Kavram kanıtıEPSS %2

      punbb · private messaging system26 Şub 2009

    • CVE-2008-5418
      21İzleyin

      Directory traversal vulnerability in login.php in the PunPortal module before 2.0 for PunBB allows remote attackers to include and execute a

      OrtaCVSS 5,1Kavram kanıtıEPSS %2

      punbb · punbb10 Ara 2008

    • CVE-2005-0570
      20İzleyin

      profile.php in PunBB 1.2.1 allows remote attackers to cause a denial of service (account lockout) by setting the user's password to NULL.

      OrtaCVSS 5,0İstismar yokEPSS %2

      punbb · punbb2 May 2005

    • CVE-2005-0571
      20İzleyin

      admin_loader.php in PunBB 1.2.1 allows remote attackers to read arbitrary files via the plugin parameter.

      OrtaCVSS 5,0İstismar yokEPSS %1

      punbb · punbb2 May 2005

    • CVE-2005-4687
      20İzleyin

      PunBB 1.2.9, used alone or with F-ART BLOG:CMS, may trust a client's IP address as specified in the X-Forwarded-For HTTP header rather than

      OrtaCVSS 5,0İstismar yokEPSS %1

      punbb · punbb31 Ara 2005